Description
Per-tenant isolation at VM speed. Jailer + rootfs + API shim for CI-runner or sandboxed-editor workloads; blast-radius audit + hardening pass.
Firecracker MicroVM Isolation
SLA: cold-start < 15s per microVM · < 1% blast radius across tenants